An Open Source Black Duck scan shows Vulnerabilities with APM.